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Section I 

INTRODUCTORY REMARKS 

Paragraph 



R4sum<$ of preceding information 1 

Sequence of study 2 



1. RAsumS of preceding information. — a. In Special Text No. 
165 (1935), Elementary Military Cryptography, the student was 
given his first introduction to the study of the more simple means 
and methods of secret writing. Considerable attention was devoted 
to certain preliminary data in the nature of definitions of basic terms 
employed in cryptography and of the general circumstances surround- 
ing the use of cryptography in military communications. The factors 
determining the influence or effect that the analysis of military 
cryptograms will have on the tactical situation were discussed some- 
what in detail, and it was shown that of these factors the most im- 
portant is the degree of cryptographic security inherent in the cryp- 
tographic system itself. This was then discussed in detail in con- 
nection with related factors involved in the length of time required to 
solve military cryptograms. Attention was also directed to infor- 
mation bearing upon the employment of cryptography in our Army, 
and the functions, duties, and responsibilities of the various arms and 
services concerned in it were set forth. Coming then to a discussion 
of certain preliminary details of a practical nature, it was shown that 
systems suitable for the military use must conform to certain more 
or less rigid requirements before they can even be considered for such 
use because of the present-day limitations of the art of signal com- 
munication in general. 

b. Having assimilate*! all the foregoing data of an introductory 
nature, the student then took up the study of the two principal classes 
of cryptograms: transposition and substitution. Various examples 
of cipher systems of the transposition class were first illustrated, these 
starting out with the simplest varieties of monoliteral route trans- 
position and then progressing through more complex types of simple 
columnar and keyword columnar methods. Only a hint was con- 
veyed as to the existence of far more complicated double and triple 
transposition systems. The principal disadvantages of transposition 
methods in general were discussed. Then substitution systems were 
taken up and after a brief discussion of the nature of alphabets in 
general and of the kinds of cipher alphabets in particular, a few 
examples of simple monoalphabetic substitution ciphers were given. 

( 1 ) 
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Methods of producing mixed alphabets were illustrated, and the use of 
gliding basic sequences to derive a set of secondary alphabets was 
described. Cases of monoalphabetic substitution with variants were 
presented and their disadvantages from the point of view of crypto- 
graphic security were discussed. It was stated that despite a multi- 
plicity of values for cipher equivalents, such methods do not yield 
cryptograms of a high degree of security, and for this reason other 
methods of producing a multiplicity of values, based upon true poly- 
alphabetic methods, are more satisfactory. The use of cipher disks 
and cipher tables of various sorts was discussed in connection with 
more complicated types of substitution, and their disadvantages 
pointed out. Mention was made of methods of increasing the degree 
of cryptographic security by suppressing or eliminating the manifes- 
tations of periodicity in polyalphabetic systems based upon the use 
of a repeating key. These led to a consideration of the development 
and use of cryptographs and cipher machines, a few of which were 
merely mentioned. 

c. The category of substitution methods under the heading of code 
systems was then discussed and examples of the various types of code 
words and codebook arrangements given. The discussion included a 
comparison of the advantages and disadvantages of cipher and code 
methods from the point of view of simplicity, rapidity, practicability, 
secrecy, accuracy, and economy. Considerable attention was devoted 
to the secrecy requirements of a cryptographic system for military use. 

d. There then followed a brief discussion of the errors which are 
almost inevitable in cryptographic communication, and of methods for 
their suppression and elimination. Finally, a summary of the funda- 
mental rules for safeguarding cryptograms was presented. 

e. With the foregoing as a background, a review of which is recom- 
mended, the student is in a position now to take up the study of more 
advanced cryptographic methods. Special emphasis is to be laid 
only upon such systems as are practicable for military use. It is 
necessary to add, however, that cryptography is by no means a static 
art or science and that viewpoints are always undergoing change; 
what is regarded as wholly impracticable today may, through some 
unforeseen improvement in technique, become feasible tomorrow, 
and it is unwise to condemn a system too hastily. For example, before 
the World War, and indeed for the first two years of that conflict, 
the use of codebooks in the theater of operations was regarded as 
wholly impracticable. 1 Colonel Hitt in his Manual for the Solution of 
Military Ciphers, published in 1916, says: 

1 See, in this oonneotion, Friedman, William F., American Army Field Codes in 
the American Expeditionary Forces During the First World War, Signal Security 
Service Publication, OCSigO, War Department, Washington, 1942. 
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The necessity for exact expression of ideas practically excludes the use of codes 
for military work, although it is possible that a special tactical code might be 
useful for preparation of tactical orders. 

Also, in an official British Army Manual of Cryptography prepared 
in 1914 is found the following statement: 

Codes will first be considered, but as they do not fulfill the conditions required 
of a means of secret communication in the field, they need not be dealt with here 
at length. 

In the 1935 edition of this text the foregoing quotations were im- 
mediately succeeded by the following comment : 

It need only be pointed out in this connection that today code methods pre- 
. dominate in the secret communication systems of the military, naval, and dip- 

lomatic services of practically all the large nations of the world. Nevertheless, 
it is likely that within the next decade or two the pendulum may onoe more 
swing over to the other position and cipher methods may again come to the fore, 
a especially if mechanical and electrical cipher machines are perfected so that their 

operation becomes practicable for general use. It is for this reason, if for no other, 
that the cryptographer who desires to keep abreast of progress must devote con- 
siderable attention to the more complicated cipher methods of the past and present 
time, for with the introduction of mechanical and eleotrical devices the complexi- 
ties and difficulties of these hand-operated methods may be eliminated. 

In preparing this revision (1943) the author finds it necessary to say 
that the forecast he made in 1935 in regard to the rebirth of cipher 
methods has been fully justified by the present trend, which is in a 
direction away from code and toward cipher methods, because of 
important advances made in the field of mechanical and electrical 
cryptographic devices and mechanisms. 

j. It may be added, too, that modem electrical communication 
methods and instrumentalities are finding an increasing need for 
applications of cryptographic theory and practice to their efficacious 
operation. For example, in very recent years there has developed a 
distinct need for secure methods and means for distorting voice com- 
munications by telephone or radiophone, and for distorting facsimile 
transmissions by wire or radiotelegraphy. Teleprinter services per- 
mitting direct cryptographic intercommunication by machines oper- 
o ated from a typewriter keyboard make it desirable to have means 

whereby, although the keyboard is operated to correspond to plain- 
text characters, the latter are instantaneously and automatically 
# enciphered in transmission and the received signals axe instantane- 

ously and automatically deciphered upon reception at the distant end. 
Thus the printing mechanism at the receiving station records the 
original plain-text characters set up on the keyboard at the sending 
station but interception of the signals passing over the line or by 
radio would yield only cipher text. 

g. It is difficult to foresee the specific cryptographic methods 
which might some day be useful in connection with developments of 
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the foregoing nature. Progress in the electrical and the electronic 
fields exercises an important effect upon developments in the crypto- 
graphic field. Methods which today appear to yield a high degree of 
cryptographic security but which are impractical for hand operation 
may, a few years from now, be readily mechanized and become highly 
practical. On the other hand, methods which today do provide a 
high degree of security may, a few years from now, become obsolete 
because high-speed electrical analytical machines have been devised 
for their rapid solution. Consequently, if among the many and more 
or less complex methods set forth herein certain ones appear to the 
student to fall outside the realm of what is today considered prac- 
ticable, it should be remembered that the purpose in describing them 
is to present for his consideration various basic cryptographic prin- 
ciples, and not to set forth methods that may with a hig h degree of 
probability be encountered in military cryptography in the immediate 
future. 

2. Sequence of study. — Just as in the preceding text, transposi- 
tion systems will first be discussed, then substitution systems. Con- 
siderable attention will be devoted to combined substitution and 
transposition methods. Following this will come a description of a 
limited number of cryptographs, together with a discussion of their 
present-day limitations. Finally, a small amount of space will be 
devoted to code systems, with special emphasis upon enciphered code 
systems. 




5 
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A. TRANSPOSITION SYSTEMS 

Section II 

MONOPHASE TRANSPOSITION SYSTEMS 

Paragraph 



Transposition systems employing geometric designs 3 

Trapezoidal designs 4 

Triangular designs 5 

Diagonal methods 6 

Interrupted keyword transposition 7 

Permutation method > 8 

Transposition method using special figures 9 



3. Transposition systems employing geometric designs. — In 
the preceding text brief mention was made of the use of geometric 
designs and figures other than rectangles in producing transposition 
ciphers. It was stated that triangles, trapezoids, and polygons of 

* various symmetrical shapes can be employed. Figures of these types 
form connecting links between the methods that use simple rectangu- 
lar designs and the more complicated methods that use figures in 
which transposition takes place along diagonals. 

4. Trapezoidal designs. — a. A trapezoid or, more accurately, a 
truncated triangle, of prearranged dimensions as regards the number 
of cells (which in this case are rhombs) into which it is to be parti- 
tioned, is constructed. There will be left on one Bide of the design a 
series of small triangles which are not to be used for inscribing letters, 
and are therefore crossed off in the design, as shown in Figure 1. 
Only two agreements are necessary in order to fix the dimensions of 
the design: a keyword or keyphrase to determine the number of cells 
at the base of the design, and an understanding as to the height of the 
design expressed in number of cells. The successive horizontal rows 
of cells will decrease by one in number from bottom to top of the 
design. 

In Figure 1, the keyphrase NO CANDY FOR ISSUE is used as a 
basis for deriving a numerical key of 15 elements, and it is assumed 
that by prearrangement it was agreed that the height of the design 

• should be eight cells. Therefore, the bottom row has 15 cells, the 
next one upwards, 14, the next, 13, and so on, to the last, with 8 cells. 
The inscription may follow any route agreed upon ; in the example, it 
follows the normal manner of writing. The transcription follows the 
numerical key order, yielding this cryptogram: 

ODAIK AEDME HPODV ITEIP NHUET BOBRO 
HDTFS EISNI ETBEF BCBTM ESHGA RTORD 
IRERE AWARR ERTNS IEPVR VASEO FTEDL 
NA 

b. Decryptographing is merely the reverse of cryptographing, there 
being no difficulties provided that the design has been correctly con- 
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structed. For this purpose cross-section paper will be found useful. 
The analysis of such a cryptogram is somewhat complicated by the 
presence of columns having varying numbers of letters; it may be 
further complicated by following complex routes in inscription. It is 




7 — 9 — 2—1 — 8 — 3-15 — 5-10-11—6-12-13-14 — 4 
NOCANDXFORXSSUS 

Figure 1 

also possible to follow a numerical key in the inscription of the plain 
text in horizontal lines; this additional procedure would further 
complicate and delay solution. 

5. Triangular designs. — a. The simplest way of drawing up a 
triangle for cryptographing is to take cross-section paper, draw a 
square the side of which is equal 
to the length agreed upon as ex- 
pressed in the number of cells, and 
then draw a diagonal cutting the 
large square into two equal tri- 
angles. This is shown in Figure 
2, where the length agreed upon 
is nine, i. e., nine cells per side. 

The letters of the plain text are 
inscribed in accordance with any 
prearranged route, the one illus- 
trated in Figure 3 being a simple 
method wherein the letters are 
inscribed in horizontal lines in the 
normal manner. When so in- 
scribed, the letters in the dia- 
gram will form 2n — 1 columns where n is the number of cells forming 
one of the sides of the square from which the triangle has been 
constructed. The total number of letters that can be inscribed within 

the triangle is the sum of n+(n— l)+(n.— 2)+(n— 3)+ +1. 

For a triangle based upon a side of 9 cells, the sum is 9+8H-7+6+ 
5+4+3-J-2-|-l =45. The letters may then be transcribed to form the 




Figure 2. 
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cryptogram by following another route, or by following a derived 
numerical key applied to the base of the triangle. A simple method of 
deriving a key of 2n — 1 elements from a key of n elements or letters 
is exemplified herewith. Let the key be DIAGONALS, a word of 
nine letters. Extend this key to 2a — 1 places by repetition, and 
then assign numerical values as usual: 

n—9; 2n—l = 17 

1-2-3— 4 — 5 — 6-7 — 8 — 9-10-11-12-13-14-15-16-17 
Keyword: DIAGONALSD I AGONAL 

Numerical key: 5-9-1-7-15-13-2-11-17—6-10—3—8-16-14—4-12 

This numerical key is the one that has been employed in enciphering 
the message in Figure 3. 




Cryptogram: 

RICRC OCSGE D00NI UA00E 
SEYID RTISS DTSNR AUNTN 
PERTR 

Fionas 3. 

b. By a slight change in procedure it is possible to encipher a mes- 
sage and produce a text which, for the sake of accuracy in special 
cases, is double the original length, but which is self-checking. Sup- 
pose that instead of applying a single numerical key to the base of the 
triangle, a double-length key is applied to the legs, as shown in 
Figure 4. Here the key is TRIANGLES, extended to double length 
by simple repetition, as follows: 

1 — 2-3-4 — 5-6-7-8 — 9-10-11-12-13-14-15—16-17-18 
Keyword: TRIANGLESTR I ANGLES 

Numerical key: 17-13-7-1-11-5-9-3-15-18-14—8—2-12—6-10—4-16 

This key is applied to the legs of the triangle beginning at the lower 
left-hand comer. The transcription then follows key-number order, 
which results in doubling the length of the message but the repeated 
letters are scattered throughout the whole message. In decrypto- 
graphing such a message the clerk merely omits the second occurrence 
of a letter if it agrees (in identity) with its first appearance in the text. 

c. Many variations in inscription and transcription can be em- 
ployed in the case of triangles as well as trapezoids. Some of the 
variations in the case of triangles are shown in Figure 5. 
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6. Diagonal methods. — a. A method involving diagonal trans- 
position which is reported to have been employed by the French 




CTRNI GENNE ATCSR 0SI1R 
SIOET RTUAI POECO TNESS 
DPRCD AURSD 

Fiqubk 4. 

Army in the World War is now to be described. A numerical key is 
derived from a fairly long word or phrase, and a rectangle is con- 
structed, as in Figure 6. The text is inscribed in this rectangle in 




Inscription: Up left side, down right, alternately.’ 

Transcription: (a) In rows from the base line, left to right and right to left, 
alternately, upwards: 

PISOS RNATU SIERS etc. 

(b) In diagonals from right leg, in key-number order: 

RIEDR OUAYN etc. 

(c) In rows from left leg, in key-number order: 

CTGEO YTCEU etc. 

(d) From columns in key-number order: 

CNROI TUGRU etc. 

Figum 5. 

normal fashion, nulls being employed, if necessary, to complete the 
last line of the rectangle. 

b. The correspondents agree beforehand upon several diagonals 
which run from left to right, and from right to left and which inter- 
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sect, thus cutting up the design quite thoroughly. In Figure 6 let 
these selected diagonals be those indicated by the numbers from 1 to 
6, inclusive, the odd ones indicating diagonals running from left to 
right. In the transcription, the letters along the indicated diagonals 
are first set down in groups of five, proceeding in key-number order. 
Correspondents must also agree beforehand as to whether a letter 
which lies at the intersection of two diagonals will be taken both times 
it is encountered or taken only once and, if so, whether on its first or 
second appearance. After all these letters have been written down, 
one then proceeds with the remaining letters in the usual columnar 
manner, omitting the letters which have already been taken, or, 
again, if specially agreed upon, repeating them every time they are 
encountered. If the latter is done, the inclusion of such letters not 
only serves as a check upon accuracy but also materially increases the 
difficulties of solution, since in this case these letters aq£ like nulls. 
The cryptographing process will become clear upon the study of the 
example in Figure 6. . 

Message: ENEMY BATTERY LOCATED AT WOODS 1,000 YARDS 
SOUTHEAST OF MUMMASBURQ HEAVY ARTILLERY 
STOP THEY ARE FIRING AT RATE OF THREE ROUNDS 
PER MINUTE FOR THE BATTERY X WILLS, MAJ. 
Keyphrase: MIDNIGHT RIDE OF PAUL REVERE. 

Enciphering diagram: 

H IDN I G H T R IDE OF PA U L RE VE RE 

15-11— 2— 16-12— 9-10— 22— 19-13-5— &-17-8-1B-1 -23-1 4— 20-5-24-6-21— 7 

E N|E|M YB A T T E iRigl L0 C |A| T E D |A| T |S| 0 0 

D|5|0NETH0US |s||n| D Y A R |D| S S 0 |U| T HE 

151 S T 0 FI U H II 15) S B |U| R G H E ]A| V |Y| A |ft| T I 

L LE R YS T 0 |P| THE Y 1*1 RE F I® I N G |S| T 

R AT E OF T |H| R E E R 0 U |H| D S |F| E |K| M I N |U| 

T E F 0 R T |h| E B ATT E R Y |X| |S| I L L |S| M A J 

Cryptogram: 

ADARR SESAR NUANX YAAPH HAURA UWYPff 
RHED0 TETFS HETBE RT0IL TGIM0 EITJ0 
YRURB TMSFT AHUTT NSLAE YEFY0 RESTE 
AESII EDLRT HN0RE 0LDY0 ECAGR YTUMR 
BDSVE L0HTN AT0H0 ETEFS TANM 

Fiona* S. 

7. Interrupted keyword transposition. — a. This method of 
transposition is a development of a more simple method wherein the 
transposition follows a numerical key. The latter must first be 
described. A keyword or keyphrase of fair length is selected and a 
numerical key derived from it. Let this key be the phrase UNI- 
FORMITY OF METHOD. 

Keyphrase: U NIF0 RMIT Y 0FMETH0D 

Numerical key: 17-10-6-3-11-14-6-7-15-18-12-4-9-2-16-5-13-1 
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The plain text is then written out in horizontal lines corresponding 
to the length of the key; then transposition is effected within each row, 
according to the sequence of numbers applicable, as shown in Figure 7. 

Message: ADMINISTRATIVE ORDERS MUST BE COMPLETED AND 
READY TO ACCOMPANY FIELD ORDERS NOT LATER 
THAN 5:00 P.M. THIS DATE. 

Enciphering diagram: 

17-10-6-5-11-14-8-7-15-18-12-4-9—2—16-5-13-1 
A D U I N I S T R A T1VE0RDE 

R SUDS TBEC 0 HPLETEDA 

N DREA DYTO A CCOMPANY 

F ZELD ORDE R SNOTLATE 

R THAN FIVE P MTHISDAT 

E 

Cryptogram: 

EEXIR MTSVD NTDIR OAAAE UPEUE BLSSM 
DTCTR OYUEC ARTYO DACND OPNAE TLNAE 
DROID STOEL FRTIA TDHVI HTNMA FESRP 
E 

Fiqube 7. 

b . In the foregoing case the encipherment takes place only by 
transposition within rows, but it is possible to complicate the method 
by transposing, in addition, the rows as a whole, employing the same 
key or only a portion of it, as much as is required. Thus, if the mes- 
sage contained 18 rows of 18 letters each, then the transposition of 
rows could be effected according to key-number order, the last row 
being taken first (since the number 1 of the numerical key happens 
in this case to be at the end of the numerical key), the 14th row being 
taken second (since the number 2 of the numerical key is the 14th 
number), and so on. Where the message does not contain as many 
complete rows as there are numbers in the key, the transposition 
takes place in key-number order nevertheless, the rows being taken 
in the numerical order of the numbers present. Using the same key 
and message as in the foregoing case, the encipherment would be as 
shown in Figure 8. 

Enciphering diagram: 

17-10-6-5-11-14-8-7-15-18-12-4-9-2-16-5-15-1 
17: A DMIN ISTR A TIVE0RDE 

10: R S M U S TBEC 0 MPLETEDA 

6: N DREA DYTO A CCOMPANY 

3: F IELD ORDE R SNOTLATE 

11: R THAN FIVE P MTHISDAT 

14: E 

Cryptogram: 

ETLNA EDR0I DST0E LFRYM ECART Y0DAC 
ND0PN AAEUP EMEBL SSMDT CTR0T IATDH 
VIHTN MAFES RPEEE IIRMT SVDNT DIR0A 
A 



Fiona* 8. 
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e. From the preceding method it is but a step to the method of 
interrupted key transposition now to be described. Instead of writing 
the text in regular-length groups corresponding to the length of the 
key, it is written out in irregular groups the lengths of which vary 
according to some prearranged plan. For example, note the basis of 
the variable grouping in the following diagram, which uses the same 
message and key as under a above: 

Enciphering diagram: 

17-10—6— 5-11-14— 8—' 7-15-18-12 — 4-9—2-16—5-13—1 
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17—10 — 6 — 3-11—14 — S— 7— 15-18-12 — 4—9-2-16—5-13—1 
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Cryptogram (columnar transposition in key-number sequence): 

EEEDI UAEAT IIIPC OERRM MDRPO AFHTE 
TIHTS BYFTP AVLRP DSEDM NLNTN SANEV 
STOOD CDITD YREDR COEEO EARTN OSTAM 
AOALL 

Fioubs Q. 

d. This method may be combined with that shown under b above, 
thus further complicating the system. In decryptographing such a 
message it is best to use cross-section paper, block out the cells to be 
occupied by letters in the deciphering diagram, and indicate the key 
numbers applicable to each line. This will facilitate the process mate- 
rially and help eliminate errors. 

e. Another method of interrupted transposition is that which 
employs a rather long sequence of digits to control the interruption. 
In order to avoid the necessity of carrying around such a written 
sequence, it is possible to agree upon a number whose reciprocal when 
converted by actual division into its equivalent decimal number will 
give a long series of digits. For example, the reciprocal of 7, or 1/7, 
yields a repeating sequence of sic digits: 142857142857 . . the 
reciprocal of 49, 1/49, yields a repeating sequence of 42 digits, etc. 



(•The four final letters LCEP are nulls, to complete the row.) 
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Zeros, when they appear, are omitted from the sequence. Suppose the 
number 19 is agreed upon, the reciprocal of which yields the sequence 
(0)52631578947368421. On cross-section paper mark off sets of cells 
corresponding in number to the successive digits. Thus: 

5 2 6 3 1 5 

I I I II [XII |X| | 1 ! || Ixl 1 I 1X1 |X| I I 1 l~i etc. 

Let the message be ATTACK HAS BEEN POSTPONED. 
Encipherment: 

5 2 6 3 1 5 

H|E|S|0|X|T|A|X|T|S|N|T|N|D|X|A|B|P|X|C|X|K|EJ0|P|E| 



Cryptogram: 



AHESO TATSN TNDAB PCKEO PE 



f. To decryptograph such a message, the cryptogram is written 
down in a series of cross-section , cells, which are then blocked off in 
sets according to the numerical key: 

5 2 6 3 1 5 



|A|H|E|S|OlX|T|A|X|T|S|N|T|N|D|X|A|B|P|X|C|X|K 



Taking the letters in consecutive order out of the successive sets, and 
crossing them off the series at the same time as they are being written 
down to construct the plain text, the message is found to begin with 
the following two words: 



mft|E|S|Q|X| i mlXltl$|N|T|N|D|X|*|B 




g. Preparatory to cryptograpbing, it is necessary to find the length 
of the message to be enciphered and then to mark off as many cells as 
will be required for encipherment. Nulls are used to fill in cells that 
are not occupied after enciphering the whole message. The secrecy of 
the method depends, of course, upon the reciprocal selected, but there 
is no reason why any fraction that will yield a long series of digits 
cannot be employed. If the selection of key numbers were restricted 
to reciprocals, the secrecy would be more limited in scope than is 
actually necessitated by the method itself. 

8. Permutation method. — a. An old method, known in litera- 
ture as the aerial telegraphy method ,' forms the basis of this system. 

1 So named because it was first devised and employed in messages transmitted 
by a system of semaphore signaling in practical usage in Europe before the 
electrical telegraph was invented. 
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A set of permutations of 3 4, ... 9 digits is agreed upon and 
these permutations are listed in a definite series. As an example, let 
these permutations be made of the' digits 1 to 5, selecting only four 
of the possible 120. Suppose those selected are the following, set 
down in successive lines of the diagram in Figure 10a: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 












3 2 5 1 4 


3 


2 


5 


1 


4 












1 5 3 2 4 


1 


5 


3 


2 


4 












4 3 15 2 


4 


3 


1 


5 


2 













Fiqubi 10b. 



The letters of the plain text, taken in sets of fives, are distributed 
within the sections of the diagram in accordance with the permuta- 
tions indicated above the sections and also at the left. Thus, the 
first five letters of the text, supposing them to be the initial letters of 
the word RECOMMENDATIONS, are inserted in the following 
positions: 



Permutation 



2 3 15 4 




The next five letters are inscribed in the second line of the diagram 
in the sections indicated by the permutation above and at the left of 
the line. Thus: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 


E 


C 


R 


M 


0 


3 2 5 1 4 


3 


2 


5 


1 


4 


N 


E ■ 


A 


M 


D 



This process is continued for each line and for as many lines as there 
are permutations indicated at the left. In the foregoing case, after 
twenty letters have been inserted, one inserts a second set of five 
letters again on the first line, placing the letters of this second set 
immediately to the right of those of the first set, respectively in key- 
number order. The succeeding lines are treated in similar fashion 

503207°— 43 2 
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until the whole message has been enciphered. The following example 
will illustrate the process: 

Message: RECOMMENDATIONS FOR LOCATIONS OF NEW 
BALLOON POSITIONS MUST BE SUBMITTED 
BEFORE 12TH AIRDROME COMPANY CHANGES 
COMMAND POST TOMORROW. 



Enciphering diagram: 
Permutation 





2 


3 


1 


5 


4 


EASEOM 


CTIDMA 


RCOTRM 


MOIECD 


OITBEN 


BB 


3 


2 


5 


1 


4 


NOSRPS 


ESN0M0 


ANUTNT 


MN0F0P 


DFMEAT 


1 5 3 2 4 


1 


5 


3 


2 


4 


TESWYO 


SLSTNR 


OBBLHO 


IWTECM 


NAEFAR 


mm 


4 


3 


1 


5 


2 


LNIRCB* 


ROMISC* 


FLUHGO 


OPTDOD* 


00BAEW 



* The letters B, C, and D an noils, to oomplete the figure. 

Figure 10b. 



The letters of the cipher text are taken from the diagram according 
to any prearranged route, the most simple being to transcribe the 
lines of letters in groups of fives, thus: 

EASEO MCTID MARCO TRMMO IECD0 ITBEN 
NOSRP SESNO MOANU TNTMN OFOPD FMEAT 
TESWY OSLST NROBB LHOIW TECMN AEFAR 
LNIRC BROME SCFLU HG00P TDODO OBAEff 

b. The foregoing method when employed in its most simple form 
does not yield cryptograms of even a moderate degree of security; 
but if the method of inscription and transcription is varied and mode 
more complex, the degree of security may be increased quite notice- 
ably. It is possible to use longer permutations, based on sets of 6, 
7, 8, or 9 digits, but in every case the successive permutations must 
be prearranged as regards both their exact composition and their 
order or arrangement in the diagram. 

9. Transposition method using special figures. — a. The 
method now to be described is useful only in special cases where the 
correspondence is restricted to brief co mmuni cations between a very 
limited number of persons. It is necessary to agree in advance on 
certain particulars, as will be seen. Let the message to be enciphered 
be the following: 

FOUR TRANSPORTS WILL BE COMPLETED BY END 
OF APRIL AND SIX MORE BY END OF JULY. 





































L5 
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Cryptogram: 

ORPSL OFUTA SOTWL BCMRN RIEPE BDPAI 
LTDYN OARLN SXEEF I DURE FYOEY NOJLB 
DU 

Fiocui 11. 

b. It will be noted that it is essential to agree in advance not only 
upon the nature of the figure but also upon the number of figures per 
line. 

e. The next series is a modification of the preceding. The same 
message will be employed, with a double-cross figure, five figures per 



Cryptogram: 



OUPOL BETDO FRSRL ELENF NTITP CEDIA 
ARWSM OYBRP ANREF JLDOB OUUSD YLXIN 
EY 

Figubi 12. 
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d. Still another series may be formed, as follows: 



X 
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. 1 
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V T 
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■U X* 
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< 








H 




B 


_ 






x 


' j 


I 


g 






X 


jj * 


3 Y 


u 






8 


1 


1 


# 







Cryptogram: 

FSLLN NOIPP LEEID AUWOM BYTRO RRSRO 
EBEPF TTCDA LOOUA DRFXN NEJID EBYUS 
YL 

Fiqube 13. 

e. A figure of different form than the preceding forms the basis of 
the next type. 



OOEDRtOX&WPNNLX 




7PBETJRCBTSMEAILDSLT 



FHROPSBJIXEL 




0A0DADEFRIIUL11NI 

Cryptogram: 

OOEDR TOYRW PNNLE FPBEU RCBTS 
MEAIL DSLTF NROPS BJIXE LOAOD 
ADEFR ZYUIil NY 

Figure 14. 

/. From the foregoing examples, it is obvious that many other 
figures may be used for effective transpositions of this kind, such as 
stars of varying numbers of points, polygons of various symmetrical 
shapes, etc. It is merely necessary to agree upon the figures, the 
number of figures per line, the starting points of the inscription and 
transcription processes. 

g. The method lends itself readily to combination with simple 
monoalphabetic substitution, yielding cryptograms of a rather high 
degree of security. 
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Section III 

POLYPHASE TRANSPOSITION SYSTEMS 

Paragraph 



Polyphase transposition methods in general - - 10 

True and false polyphase transpositions 11 

True double transposition 12 



10. Polyphase transposition methods in general. — a. In 
paragraph 32 of Special Text No. 165, brief mention was made of 
transposition systems in which two or more processes of rearrange- 
ment are involved. It was stated that only a very limited number 
of such transposition methods are practicable for military use, but 
that the degree of security afforded by them is considerably greater 
than that afforded by certain much more complicated substitution 
methods. The methods referred to are those which involve two or 
more successive transpositions, and merely for purposes of brevity 
in reference they will here be called polyphase transposition methods 
to distinguish them from the single monophase methods thus far 
described. 

b. It is obvious that a polyphase transposition method may involve 
2, 3, . . . successive transpositions of the letters of the plain 
text. To describe these methods in general terms, one may indicate 
that the letters resulting from a first transposition, designated as the 
T— 1 transposition, form the basis of a second, or T-2 transposition. 
If the process is continued, there may be T-3, T-4 . . . trans- 
positions, and each may involve the use of a geometric figure or 
design. For convenience, the design involved in accomplishing the 
T-l transposition may be designated as the D-l design; that involved 
in accomplishing the T-2 transposition as the D-2 design, etc. 
However, it may as well be stated at this point, that so far as military 
cryptography is concerned, methods which involve more than D-2 
and T-2 elements are entirely impractical and often those which 
involve no more than D-2 and T-2 elements are also impracticable 
for such use. 

11. True and false polyphase transpositions. — a. It is pos- 
sible to perform two or more transpositions with the letters of a text 
and yet the final cryptogram will be no more difficult to solve than if 
only a single transposition had been effected. The equivalent of this in 
the case of substitution ciphers is to encipher a monoalphabetic crypto- 
gram by means of a second single alphabet; the final result is still a 
monoalphabetic substitution cipher. Likewise, if a message has been 
enciphered by a simple form of route transposition and a second and 
similar or approximately similar form of simple route transposition 
is again applied to the text of the first transposition, the final text is 
still that of a monophase transposition cipher. Again, two transpo- 
sitions may be accomplished without really affecting a most thorough 
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scrambling of the letters composing the original text. Examples 
will serve to clarify the difference between false and true polyphase 
transposition. 

b. Note the following simple columnar transposition cipher pre- 
pared according to the method described in paragraph 26 of Special 
Text No. 165: 

Message: DELIVER ALL AMMUNITION TO 4TH DIVISION 
DUMP 

Keyword: SCHEDULE 

Enciphering rectangle: 

7 1 5 3 2 8 6 4 




ELIRI VMTDD XMNHN AIOIP LAOTO RNFVM 
DLTUS EUOIU 

Figure IS. 



In producing the foregoing cryptogram only the columns were 
transposed. Suppose that by prearrangement, using the keyword 
BREAK (derived numerical key = 2-5-3-1-4) , the horizontal lines 
of the foregoing enciphering rectangle were also to be transposed. 
For example, let the horizontal lines of the rectangle D-l be trans- 
posed immediately before taking the letters out of the columns of the 
design (in key-number order) to form the cipher text. Thus: 




Cryptogram (T-2) : 



REIIL DVTDM HINNM IAOPI TLOOA VRFMN 
UDTSL IEOUU 



Figure It. 
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c. The foregoing, however, is not a case of true polyphase or so- 
called double transposition. The same final result may be accom- 
plished in a way which will at first glance appear quite different but is 
in reality one that accomplishes the same two operations by combin- 
ing them in one operation. Let the message be inscribed as before, 
but this time with both numerical keys applied to the top and side 
of the rectangle. Then let another rectangle of the same riimonainns, 
but with numbers in straight sequence instead of key-number sequence, 
be set alongside it. Thus: 
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P 



2 3 4 5 6 7 8 



D-l 



1 

2 

3 

4 

5 



ft aasE 17. 



D-2 



Each letter in D-l is now transferred to that cell in D-2 which is 
indicated by the row and column indicators of the letter in D-l. 
For example, the first letter, D, of D-l, has the indicators 2-7 and 
it is placed in the 2-7 cell in D-2; the second letter of D-l, which is 
E, is placed in the 2-1 cell of D-2, and so on. The final result is as 
follows: 
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D-l D-2 

FigVbi 18. 



It will be seen that if the columns of D-2 are now read downwards 
in straight order from left to right the final cryptogram is identical 
with that obtained under b above: REIIL DVTDM, etc. 

d. The foregoing cipher, often called the Nihilist Cipher, is referred 
to in some of the older literature as a double transposition cipher 
because it involves a transposition of both columns and rows; and 
indeed as described under b above it seems to involve a double process. 
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It is, however, not an example of true double transposition. When 
the mechanism of this cipher is compared with that now to be 
described, the great difference in the cryptographic security of the two 
methods will become apparent. 

12. True double transposition. — In the form of the false double 
transposition described above, it is only entire columns and entire 
rows that are transposed. The disarrangement of the letters is after 
all not very thorough. In true double transposition this is no longer 
the case, for here the letters of columns and rows become so thor- 
oughly rearranged that the final text presents a complete scrambling 
almost as though the letters of the message had been tossed into a hat 
and then drawn out at random. 

Section IV 

TRUE DOUBLE TRANSPOSITION 

Paragraph 



True double transposition of the columnar type 13 

General remarks on true polyphase transposition 14 



13. True double transposition of the columnar type. — a. It is 
by what is apparently a simple modification of certain of the co- 
lumnar methods already described that an exceedingly good true 
double transposition can be effected. Let a numerical key be derived 
from a keyword in the usual manner and let the message be written 
out under this key to form a rectangle in the usual manner for colum- 
nar transposition. The length of the message itself determines the 
exact dimensions of the rectangle thus formed, and whether or not it 
is completely or incompletely filled. 

b. In its most effective form the double transposition is based upon 
an incompletely filled rectangle; that is, one in which one or more cells 
in the last line remain unfilled. An example of the method now follows. 
Let the keyword be INTERNATIONAL; the message to be enciph- 
ered, as follows: 

OUR ATTACK SLOWING UP IN FRONT OF HILL 1000 
YARDS SOUTHEAST OF GOLDENVILLE STOP RE- 
QUEST PROMPT REENFORCEMENT. 

Keyword: INTERNATIONAL 

Derived numerical key: 4-7-12-3-11-8-1-13-5-10-9-2-6 

The first, or D-l, rectangle is inscribed in the usual manner of simple 
numerical key columnar transposition. It is shown as D-l in the 
accompanying figure. The letters of the T-l transposition are then 
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4-7—12-3—11-8—1—13-5- 10-9—2—6 
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D-l 

4—7—12 - 3—11 - 8— 1—13 - 5- 10 - 9—2— 6 




Figub* 19a. 



inscribed in the second, or D-2, rectangle in the normal manner oj 
writing , that is, from left to right and from the top downwards. This 
is shown in D-2 of Figure 19a for the first two columns of D-l (in 
numerical key order) after transfer of their letters into D-2. The 
letters of the remaining col umns of D-l are transferred in the same 
manner into D-2, yielding the following rectangle: 
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4 — 7—12 - 3—11 - 8 — 1—13 - 5 - 10 - 9 — 2 — 6 
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For the T-2 text the letters are transcribed from the D-2 rectangle, 
reading down the columns In key-number order, and grouping the 
letters in fives. The cryptogram is as follows: 

PTRUT OGTTI RLOPP DUSVO SOS AU AOREA 
CORSH EEDNF WTULC NNEST QOFOY KFFHR 
PUORA NTLTE LNLES GLOER OMONA IHIES 
ENETN MDIT 



c. In paragraph 28 of Special Text No. 165 a variation of the simple 
columnar key method of transposition was described. If the process 
therein indicated is repeated, double transposition is effected. The 
following example will serve to illustrate the method, using the same 
message and key as were used in the paragraph to which reference 
was made: 

Message: REQUEST IMMEDIATE REENFORCEMENTS 

Keyword: PRODUCT 

Derived numerical key: 4-5-3— 2-7— 1—6 



Encipherment: 



4-5-3-2-7-1-6 
Text: REQUEST 
T-l: S I N E U E E 
T-2: E R E E E R E 



4— 5-3-2— 7— 1-6 
I M II E D I A 
E Q U R C R I 
F N M T A S E 



4-5-3— 2-7— 1-6 
T E R E E N F 
toteher 
T S E I Q 0 T 



4-5-3-2-7-1-6 4-5 
ORCEMEN TS 
STAFNED EM 
MEXRDUC MN 



Cryptogram: 

EREEE REFNM TASET SEIQO TMEIR 
DUCMN 
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d. In some respects this modified method is simpler for the novice to 
perform correctly than is that employing rectangles. Experience has 
shown that many inexpert cryptographic clerks fail to perform the two 
transpositions correctly when D-l and D-2 rectangles are employed 
in the work. 

14. General remarks on true polyphase transposition. — a. 
The cryptographic security of the true double transposition method 
deserves discussion. Careful study of a cryptogram enciphered by the 
double transposition method set forth in paragraph 135 and c will 
convince the student that an extremely thorough scrambling of the 
letters is indeed brought about by the method. Basically, its principle 
is the splitting up of the adjacent or successive letters constituting 
the plain text by two sets of “cuts”, the second of which is in a direc- 
tion that is perpendicular to the first, with the individual “cuts” of 
both sets arranged in a variable and irregular order. 1 1 is well adapted 
for a regular and voluminous exchange of cryptograms between corre- 
spondents, because even if many messages in the same key are inter- 
cepted, so long as no two messages are identical in length, they can only 
be cryptoanalyzed after considerable effort. 

5. Triple and quadruple transpositions of the same nature are 
possible but not practical for serious usage. Theoretically, a continu- 
ation or repetition of the transposition process will ultimately bring 
about a condition wherein the D-n rectangle is identical with the 
D-l rectangle; in other words, after a certain number of trans- 
positions the rectangle produced by a repetition of tbe crypto- 
graphing process results finally in decryptographing the message. 
Exactly how many repetitive transpositions intervene in such cases is 
extremely variable and depends upon factors lying outside the scope 
of this text. 

c. In the example of cryptographing given in paragraph 135, the 
D-l and D-2 rectangles are identical in dimensions, and identical 
numerical keys are applied to effect the T-l and T-2 transpositions. 
It is obvious, however, that is it not necessary to maintain these 
identities; D-l and D-2 rectangles of different dimensions may 
readily be employed, and even if it is agreed to have the dimensions 
identical, the numerical keys for the two transpositions may be differ- 
ent. Furthermore, it is possible to add other variable elements. (1) 
The direction or manner of inscribing the letters in the D-l rectangle 
may be varied ; (2) the direction of reading off or taking the letters out 
of the D-l rectangle in effecting the T-l transposition, that is, in 
transferring them into the D-2 rectangle, may be varied; (3) the 
direction of inscribing these letters in the D-2 rectangle may be 
varied; (4) the direction of reading off or taking the letters out of the 
D-2 rectangle in effecting the T-2 transposition may be varied. 
Finally, one or more nulls may be inscribed at the end of either the 
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D-l or the D-2 rectangle (but not both) in order that the total 
number of letters involved in the two transpositions be different, a 
factor which still further increases the degree of cryptographic 
security. 

d. The solution of cryptograms enciphered upon the double trans- 
position principle is often made possible by the presence of certain 
plain-text combinations, such as QU and CH (in German). For this 
reason, careful cryptographers substitute a single letter for such 
combinations, as decided upon by preagreement. For example, in 
one case the letter Q was invariably used as a substitute for the 
compound CH, with good effect. 

Section V 

GRILLES AND OTHER TYPES OF MATRICES 



Paragraph 

Types of cryptographic grilles 15 

Simple grilles 16 

Revolving grilles 17 

Grilles of other geometric forms 18 

Polyphase transposition by grilles 19 

Increasing the security of revolving grilles 20 

Construction of revolving grilles 21 

Nonperforated grilles 22 

Rectangular or “post card” grilles 23 

Indefinite or continuous grilles . 24 



15. Types of cryptographic grilles. — Broadly speaking, crypto- 
graphic grilles 1 are sheets of paper, cardboard, or thin metal in which 
perforations have been made for the uncovering of spaces in which 
letters (or groups of letters, syllables, entire words) may be written 
on another sheet of paper upon which the grille is superimposed. 
This latter sheet, usually made also of cross-section paper, will here- 
after be designated for purposes of brevity in reference as the grille 
grid, or grid. Its external dimensions are the same as those of the 
grille. Grilles are of several types depending upon their construc- 
tion and manner of employment. They will be treated here under 
the titles of (1) simple grilles, (2) revolving grilles, (3) nonperforated 
grilles, and (4) “post card” grilles. 

16. Simple grilles. — a. These consist usually of a square in which 
holes or apertures have been cut in prearranged positions. When 
the grille is superimposed upon the grid, these apertures disclose cells 
on the grid, in which cells letters, groups of letters, syllables, or entire 
words may be inscribed. An example is shown in Figure 20. The 
four sides of the obverse surface of the grille are designated by the 
figures 1, 2, 3, 4; the four sides of the reverse surface, by the figures 

1 Also often called "stencils.” The general term matrix (plural, matrices ) is 
very useful in referring to a geometric figure or diagram used for transposition 
purposes. Other terms in common use are cage, frame, box, etc. 
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5, 6, 7, 8. These figures are employed to indicate the position of the 
grille upon the grid in encipherment. 

6. (1) In cryptographing a message the grille is placed upon the 
grid, in one of the eight possible positions: Obverse surface up, with 




figure 1, 2, 3, or 4 at the top left; or reverse surface up, with figure 5, 
6, 7, or 8 at the top left. The letters of the plain text are then 
inscribed in the cells disclosed by the apertures, following any pre- 
arranged route. In Figure 21, the normal manner of writing, from 





